os/modules/server/default.nix

{ lib, config, pkgs, ... }:
with lib;
let
  psCfg = config.pub-solar;
  cfg = config.pub-solar.server;
in
{
  options.pub-solar.server = {
    enable = mkEnableOption "Enable server options like sshd";
  };

  config = mkIf cfg.enable {
    services.openssh = {
      enable = true;
      permitRootLogin = lib.mkForce "prohibit-password";
      passwordAuthentication = true;
      openFirewall = true;
    };
  };
}